Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37372e302f32342d3234203d3e20323637383439.roa
File:                     36362e3233312e37372e302f32342d3234203d3e20323637383439.roa (raw, json)
Hash identifier:          tAKc3vchwHqkemwLx+K7J042nJBFDAwJgypTczQgKzw=
Subject key identifier:   A2:20:33:2E:C2:78:1B:78:27:6E:7B:1E:D2:C9:AA:6A:9A:B3:A0:FB
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       59785D0AF5472A4C025662C2B85591F1C4044C1F
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37372e302f32342d3234203d3e20323637383439.roa
Signing time:             Wed 23 Apr 2025 23:15:50 +0000
ROA not before:           Wed 23 Apr 2025 23:10:50 +0000
ROA not after:            Wed 22 Apr 2026 23:15:50 +0000
asID:                     267849
IP address blocks:        66.231.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:78:5d:0a:f5:47:2a:4c:02:56:62:c2:b8:55:91:f1:c4:04:4c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Apr 23 23:10:50 2025 GMT
            Not After : Apr 22 23:15:50 2026 GMT
        Subject: CN=A220332EC2781B78276E7B1ED2C9AA6A9AB3A0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:bc:7b:c1:2c:6c:4a:8a:d9:e3:4a:3e:be:
                    a2:f3:02:62:db:fd:a5:84:fc:61:7a:8c:2e:b1:e4:
                    3a:6d:f5:8c:b3:f4:cc:e6:22:ee:df:13:c9:58:6d:
                    69:23:6e:14:2a:cf:82:bf:77:b7:c7:46:1c:86:5f:
                    08:a9:61:1c:d6:71:25:08:a6:f5:61:ac:2f:99:2d:
                    41:fa:02:ca:6c:c3:85:dd:b6:a2:de:94:1a:cd:8a:
                    9f:60:0c:44:da:c3:5c:00:47:fc:99:ef:27:3a:c2:
                    3f:7e:03:5e:db:d1:a2:97:39:d6:97:03:be:50:c0:
                    1e:32:c0:47:22:c3:8d:e7:7f:81:34:4f:68:a3:90:
                    e4:e4:65:ba:ae:16:a1:34:7d:43:83:62:42:39:b7:
                    3b:71:e9:70:81:8e:c3:d8:86:7e:fd:b8:30:a7:25:
                    f3:b4:b8:7a:6b:e6:60:04:f1:85:05:cd:fe:37:4b:
                    5c:cb:a2:4f:af:05:69:ea:db:6c:56:7c:90:d2:5f:
                    8c:4b:06:9b:5b:9e:1e:dc:ae:be:aa:ef:88:5b:a8:
                    c0:f4:59:70:af:a4:0d:95:6d:8a:dc:6a:f3:c5:10:
                    d0:ea:b9:3d:e6:c2:f2:c9:9d:7c:3e:f9:af:63:74:
                    82:af:79:bf:27:93:05:1b:ee:af:b0:2c:8a:e3:06:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:20:33:2E:C2:78:1B:78:27:6E:7B:1E:D2:C9:AA:6A:9A:B3:A0:FB
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37372e302f32342d3234203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:41:b9:07:52:67:6a:ec:07:91:a6:73:26:03:08:de:1b:a1:
         bc:23:5a:cd:71:33:91:dd:df:0f:3e:10:b6:74:a3:29:d0:cd:
         c5:80:74:16:18:1e:5c:3a:5f:51:57:1c:c1:8b:9c:6a:d2:7f:
         54:b4:4a:f9:2b:6d:9d:f5:b7:f0:fb:c5:f0:58:b4:ea:fd:f7:
         02:1e:1d:1a:87:b9:a8:eb:ca:f7:5e:03:3e:c4:a3:ec:e2:a4:
         cd:b9:b1:bf:41:a2:a4:3b:ec:a3:86:0d:72:21:24:ba:66:a2:
         06:fc:06:a2:96:99:55:22:4c:4f:65:20:06:fa:19:cd:c8:2f:
         a0:a3:62:44:6b:29:d3:5e:87:fe:7c:12:27:1c:68:29:26:05:
         d9:93:98:8b:43:90:67:d2:ff:e0:01:28:b4:95:06:23:10:6d:
         5c:e3:54:e6:af:b9:73:bf:04:4a:fd:73:f6:22:45:e9:d8:6e:
         79:e5:c6:02:fc:cd:bb:29:7b:a9:fe:7c:c0:7b:4e:24:53:20:
         20:69:0d:16:70:e0:17:0d:ee:b2:92:2e:bc:db:07:fb:36:c0:
         52:fe:9e:d6:9a:c0:ff:c3:af:23:63:e4:8e:26:a1:8d:1c:3f:
         b1:c7:d9:8b:2d:98:19:9a:75:5f:86:f4:cf:59:d0:ab:2d:17:
         c2:a0:b5:3d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWXhdCvVHKkwCVmLCuFWR8cQETB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5NjdGRjMxMDlFMEFBN0VFNUVDMUM2NDAzMDBENUEw
MEZGNDFCMDAeFw0yNTA0MjMyMzEwNTBaFw0yNjA0MjIyMzE1NTBaMDMxMTAvBgNV
BAMTKEEyMjAzMzJFQzI3ODFCNzgyNzZFN0IxRUQyQzlBQTZBOUFCM0EwRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDea7x7wSxsSorZ40o+vqLzAmLb
/aWE/GF6jC6x5Dpt9Yyz9MzmIu7fE8lYbWkjbhQqz4K/d7fHRhyGXwipYRzWcSUI
pvVhrC+ZLUH6Aspsw4XdtqLelBrNip9gDETaw1wAR/yZ7yc6wj9+A17b0aKXOdaX
A75QwB4ywEciw43nf4E0T2ijkOTkZbquFqE0fUODYkI5tztx6XCBjsPYhn79uDCn
JfO0uHpr5mAE8YUFzf43S1zLok+vBWnq22xWfJDSX4xLBptbnh7crr6q74hbqMD0
WXCvpA2VbYrcavPFENDquT3mwvLJnXw++a9jdIKveb8nkwUb7q+wLIrjBpCdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUoiAzLsJ4G3gnbnse0smqapqzoPswHwYDVR0j
BBgwFoAUwpZ/8xCeCqfuXsHGQDANWgD/QbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTEwNEQ3Nzc3QjAyOUVEQTc4MkRBQTZBNkY3NDM0RkRC
Nzc3Q0U2OEEwOTQ5Nzk3ODE0NjRFQzU5RkY4QTlBLzAvQzI5NjdGRjMxMDlFMEFB
N0VFNUVDMUM2NDAzMDBENUEwMEZGNDFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjk2N0ZGMzEwOUUwQUE3RUU1
RUMxQzY0MDMwMEQ1QTAwRkY0MUIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREExMDRENzc3N0IwMjlFREE3ODJEQUE2QTZGNzQzNEZEQjc3N0NFNjhB
MDk0OTc5NzgxNDY0RUM1OUZGOEE5QS8wLzM2MzYyZTMyMzMzMTJlMzczNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM4MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAELnTTAN
BgkqhkiG9w0BAQsFAAOCAQEAIkG5B1JnauwHkaZzJgMI3huhvCNazXEzkd3fDz4Q
tnSjKdDNxYB0FhgeXDpfUVccwYucatJ/VLRK+SttnfW38PvF8Fi06v33Ah4dGoe5
qOvK914DPsSj7OKkzbmxv0GipDvso4YNciEkumaiBvwGopaZVSJMT2UgBvoZzcgv
oKNiRGsp016H/nwSJxxoKSYF2ZOYi0OQZ9L/4AEotJUGIxBtXONU5q+5c78ESv1z
9iJF6dhueeXGAvzNuyl7qf58wHtOJFMgIGkNFnDgFw3uspIuvNsH+zbAUv6e1prA
/8OvI2PkjiahjRw/scfZiy2YGZp1X4b0z1nQqy0XwqC1PQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:21 2025 by rpki-client on console.sobornost.net